Privacy notice
Updated 8 October 2026 · Operated by The Arts Foundry
Pracsy Studio is operated by The Arts Foundry, a Singapore sole proprietorship. For privacy requests or concerns, contact hello@pracsy.co. This notice covers teacher accounts, adult students and parent-managed family practice. Under-18 students use access approved by an adult parent or authorised guardian. Teachers must explain Pracsy to the parent and have permission to send a setup invitation. Email verification confirms control of the parent email address; it does not independently establish the person’s parental authority.
Parent-managed practice
The parent signs in with the invited email, reviews the practice permissions and explicitly chooses whether to approve. A parent setup invitation alone never grants child access. After current parental approval, the teacher can issue a private student practice link, with an optional 4-digit PIN, that connects the child’s practice space on another device without using the parent’s password. Anyone with that private practice link and, if enabled, its PIN could open the child’s practice space, so keep both private and share the PIN separately. The teacher can revoke or replace the link and disconnect the devices connected through it. New connections require the link to be used within 30 days; parental withdrawal closes access on existing devices too. Parents can also connect a device themselves. Audio and video recording requires a separate, optional permission; plans, feedback, progress and rewards remain available without it. Parents can disconnect devices or withdraw permission in Parent setup. Each child and teacher relationship has separate access.
We record the parent account, invitation, notice version, approval date, recording choice and any withdrawal. Connected devices use a private access cookie and expire after 30 days without use or 90 days after connection. Parent settings sign out after five minutes of inactivity. Use a nickname and provide only the information needed for teaching. Pracsy has no public student profiles or public recording gallery.
- Accounts: sign-in email, account identifier and profile details support login, invitations and account access. Google sign-in is optional and supplies basic identity and email information. Email and password sign-in is also available.
- Teaching and practice: student names, instruments, assignments, resources, practice logs, submitted audio or video, feedback, private teacher–student messages and rewards provide the teacher and student workspace you choose to use.
- Profile photos: optional photos are resized into small thumbnails without the original file metadata. They are visible to the teacher, student and authorised guardian connected to the practice space. You can replace or remove your photo in your profile.
- Billing: Stripe handles card and billing details. Pracsy stores the billing identifiers, subscription state and payment-event records needed to verify access. Pracsy does not receive your full card number or security code.
- Support and operations: messages you send us, service errors and security or delivery records help resolve problems and protect the service.
Who can see your work
Pracsy School: when a teacher explicitly accepts a school invitation and connects their studio, that school’s authorised administrators can oversee its student profiles, practice plans, logs, recordings, feedback, conversation history and lesson records. Teachers should explain school oversight to students and families before inviting them. Staff membership does not replace parental approval. The authorised Pracsy founder can oversee connected school studios, manage school capacity and assign school ownership. The founder’s private teaching studio remains separate. Administrator and founder conversation access is recorded. Disconnecting a teacher removes school oversight; the teacher retains their own account and teaching records.
Teacher–student conversations are shared with the connected teacher, student and authorised parent or guardian. They are not public, and students cannot browse or message other students. Practice content is shared with the teacher and student or guardian accounts explicitly linked to that student. Teachers are responsible for checking invitation addresses and for having permission to share the information they submit. Invitation and notification emails go to the linked recipients. Support access may be necessary to investigate a problem, honour a privacy request or secure the service.
Recordings and assignment resources are stored in private Supabase buckets. Authorised recordings use temporary links that expire after five minutes; someone given such a link could access it until it expires. Avoid forwarding private links or credentials. Archiving or deleting a student in the interface retains history and is not permanent erasure.
Service providers and international processing
Supabase provides authentication, the database and media storage; the current project is hosted in Tokyo, Japan. Resend delivers transactional emails. Stripe processes subscriptions. Google processes optional Google sign-in. OpenAI Sites and its hosting infrastructure serve the web application. Cloudflare provides public website analytics as described below. Microsoft 365 handles messages sent to the Pracsy contact inbox. These providers may process information outside Singapore under their own service arrangements.
Only provide information needed for the practice workflow. If your school needs specific processing terms or restrictions on where data is held, contact us before using Pracsy for that school.
Retention, cancellation and your requests
Account and practice records are retained while needed to provide your workspace, preserve the teaching history you choose to keep, resolve support or security issues, or meet legal requirements. Cancelling a paid subscription does not erase the workspace. Archived and interface-deleted students remain in the teacher’s history.
Email us to request access, correction, export, permanent deletion or withdrawal of consent where applicable. We verify that the request belongs to the account holder and may need the teacher’s involvement for shared teaching records. We will explain any information that must be retained and the reason, rather than promise immediate erasure of all copies. Privacy requests are handled by support; there is no automatic account-erasure feature in this beta.
Public website analytics
We use Cloudflare Web Analytics on selected public pages, including the landing page, help centre and legal pages, to understand visits, referral sources, broad countries, device/browser types and page performance. Cloudflare’s analytics does not use analytics cookies or persistent visitor identifiers. Network requests still involve technical information such as an IP address. We do not install this analytics beacon in teacher, student, parent, school or founder workspaces, checkout or invitation flows. Help questions, messages, recordings and account details are not sent to this analytics service. Links containing query parameters or fragments are excluded at initial page load, as are visits referred from private Pracsy workspace pages.
Device storage and security concerns
Pracsy uses browser storage for sign-in sessions, theme preferences and local interface choices. You can clear that storage or sign out on a shared device. Recording requires permission to use your microphone or camera. If you suspect an invitation was sent to the wrong person or private data was exposed, contact hello@pracsy.co immediately. We will investigate and assess the appropriate response and notification obligations.